vulnwire
7.0high

CVE-2019-15917

An issue was discovered in the Linux kernel before 5.0.5.

Published 7 y ago · modified 4 mo ago · JSON

CVSS
7.0
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.6%
percentile 51%
Public exploits
0
none known

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.

Exploit prediction (EPSS)

0.64% probability of exploitation in the next 30 days, higher than 51% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
Technology feeds
Linux kernel (RSS, critical only)

References

  • github.com /torvalds/linux/commit/56897b217a1d0a91c9920cb418d6b3fe922f590a · x_refsource_MISC, x_transferred
  • cdn.kernel.org /pub/linux/kernel/v5.x/ChangeLog-5.0.5 · x_refsource_MISC, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2019-09/msg00064.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2019-09/msg00066.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • lists.debian.org /debian-lts-announce/2019/09/msg00025.html · mailing-list, x_refsource_MLIST, x_transferred
  • security.netapp.com /advisory/ntap-20191004-0001/ · x_refsource_CONFIRM, x_transferred
  • seclists.org /bugtraq/2020/Jan/10 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • packetstormsecurity.com /files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html · x_refsource_MISC, x_transferred
  • lists.debian.org /debian-lts-announce/2020/03/msg00001.html · mailing-list, x_refsource_MLIST, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.